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What is claimed is: 




K A method comprising: 

providing a partition on a storage device of a computer system, wherein 
said partition is normally invisible to an operating system of the computer system 
unless the partition is unlocked; and 

unlocking the partition in response to an unlock request received from a 
software task having knowledge about a proper handshake to unlock the 
partition, wherein the parti/ion is visible to the operating system when it is 
unlocked. 



1 2. The method of 

2 having a disk controller. 

1 3. The method of 

2 by establishing a proper 

3 IDE controller for contro 



claim 1 , wherein the storage device is a hard disk drive 

claim 1 , wherein the unlocking of the partition is initiated 
unlock handshake between the software task and an 
ing the storage device. 



1 4. The method of claim 3, wherein the software task requests a master 

2 token from the IDE controller when the computer system is first turned on and the 

3 unlock handshake between the software task and the IDE controller is 

4 established by passing jthe master token back to the IDE controller as a 

5 parameter. 
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5. The method Jbf claim 2, wherein the software task requests a master 
token from the disk co itroller when the computer system is first turned on, said 
master token is used tyy the software task to initiate the proper handshake to 
unlock the partition. 



6. The method of claim 1 , 
partition when the partition is u 
software having knowledge a 
partition. 




omprising preventing an access to the 
nless the access is requested by a 

cess handshake for accessing the 
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1 7. The method of claim 6, wnerein the software receives a usage token 

2 from an IDE controller when the paction is unlocked and the access handshake 

3 between the software and the IDE controller is established by passing the usage 

4 token back to the IDE controller as a parameter. 

1 8. The method of claim 1, /further comprising locking the partition in 

2 response to a lock request received from a software having knowledge about a 

3 proper handshake for locking the partition. 
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9. The method of claim fl, further comprising providing a standard partition 
on the storage device, wherein! said standard partition is always visible to the 
operating system and generally accessible to other softwares. 

y&f fK machine-readable medium that provides instructions, which when 
executed by a set of processors, causes said set of processors to perform 
operations comprising: 

receiving an open request from a software to access a secure-private 
partition on a hard drive of a computer system; 

validating the open request received from the software; and 



requesting unlocking 



f the secure-private partition in response to the 



validation of the open request received from the software. 



1 11. The machine-readable medium of claim 10, wherein the operations 

2 further comprise requesting! locking of the secure-private partition in response to 

3 a close request received from the software. 

1 12. The machine-readable medium of claim 10, wherein the requesting of 

2 the unlocking of the secure partition further comprises: 

3 requesting a master) token from an IDE controller when the computer 

4 system is turned on; 

5 storing the master tbken in a secure storage location; 

6 retrieving the master token from the secure storage location when an 

7 access to a secure-private partition is needed; and 

8 passing the master pken as a parameter to the IDE controller. 
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13. The machine-readable mec 
further comprise requesting an access 
to an access request received from tha 



ium of claim 10, wherein the operations 
to the secure-private partition in response 
software. 



14. The machine-readable medium of claim 13, wherein the requesting of 
the access to the secure partition furtrae 



receiving a usage token; and 
passing the usage token to the 
secure partition. 



er comprises: 



IDE controller to gain an access to the 



15. The machine-readable medium of claim 10, wherein the request from 
the software to access the secure-private partition is received by a privacy 
gatekeeper which prescreens the rec uest to determine if the software has an 
authorization to access the secure-private partition. 

A system comprising: 
a storage device having a storage controller, said storage device having at 
least one secure-private partition, wherein said secure-private partition is 
selectively in one of locked and unlocked modes, wherein said secure-private 
partition is invisible to an operating s/stem when it is locked and the secure- 
private partition is visible to the oper ating system when it is unlocked; 

coupled to the storage controller; and 
k operatively coupled to the IDE controller, 
an unlock request to unlock the secure- 
private partition in response to a val d unlock handshake established between the 
IDE controller and the security/gny acy^oftware task and said IDE controller 
initiates a lock request to lock the socure-private partition in response to a valid 
lock handshake established between the IDE controller and the security/privacy 



an IDE controller operatively 
a security/privacy software ta 
wherein said IDE controller initiates 



software task. 



17. The system of claim 16, 



wherein the security/privacy software task 



requests a master token from the IDE controller when the system is turned on 
and sends the master token to the DE controller as a parameter when making a 
request to the IDE controller to unlqck the secure-private partition. 
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1 18. The system of claim 16, further comprising a requesting software and 

2 a privacy gatekeeper which acts as a ^gatekeeper to the security/privacy software 

3 task, wherein when the requesting software makes a request to access the 

4 secure-private partition, the privacy gatekeeper prescreens the request to 

5 determine if the requesting software has an authorization to access the secure- 

6 private partition. / 

1 19. The system of claim 18, wherein the IDE controller allows an access 

2 to said at least one secure-private partition only when a valid access handshake 

3 is established between the requesting software and the IDE controller. 

1 20. The system of claim l^wFferein the IDE controller generates and 

2 return a usage token to the requ^stingraoftware once the secure-private partition 

3 is unlocked, wherein the access harrasnake is established between the IDE 

4 controller and the requesting sqrftware wnen the IDE controller validates the 

5 usage token passed back by the/requesting v sofiware. 



16 



